d54b4afb0daea7be213003f5e4ffffbf_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d54b4afb0daea7be213003f5e4ffffbf_JaffaCakes118
Size

313KB
MD5

d54b4afb0daea7be213003f5e4ffffbf
SHA1

033eef81235666dcec876ada8fcf0ee767b43bb5
SHA256

00bbe8f44950f8b8d23c7162491f92548adb6fcea1a43f026e2c96d0d97a0ce8
SHA512

149fcf7cacc5437d5f165e4ba2506f9910901845add0d36a4f273f5532efec165503b19e3d1d8e4c8c538a61e24e4f6967868ccc36f8ab3775d5344fa6e6f32e
SSDEEP

3072:L2qkDquknQ+bxxPd7zAIRfcxkJFRanLhlZrGRQn/pcg53vs/Inb:L2k7jdWxkJULVSRQ/3Rn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d54b4afb0daea7be213003f5e4ffffbf_JaffaCakes118

Files

d54b4afb0daea7be213003f5e4ffffbf_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f0c81b6f8530eba9d7b8894954822d1c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

oleaut32

SysFreeString

advapi32

RegQueryValueExA

user32

GetKeyboardType

gdi32

UnrealizeObject

version

VerQueryValueA

comctl32

_TrackMouseEvent

shell32

Shell_NotifyIconA

Sections

.text
Size: 149KB - Virtual size: 440KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE